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IN THE CLAIMS 

1 . (Currently Amended) A method for use in a device associated with a first party for 
decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the method 
comprising the steps of: 

obtaining the ciphertext in the first party device sent from a device associated with a second 
party; and 

generating in the first party device a plaintext corresponding to the ciphertext based on 
assistance from a the second party device, wherein the assistance comprises an exchange of 
information between the first party device and the second party device separate from the sending of 
the ciphertext from the second party device to the first party device, the plaintext representing a 
result of the decryption according to the Cramer-Shoup based encryption scheme, such that the first 
party device and the second party device jointly perform a decrypt ion operation of the ciphertext by 
each respectively performing one or more subcomputations of the joint decryption operation based at 
least in part on respective partial shares of a key that each party holds, but such that neither can 
decrypt the ciphertext alone. 

2. (Original) The method of claim 1, wherein the generating step further comprises an 
exchange of information between the first party device and the second party device whereby at least 
a portion of the information is encrypted using an encryption technique such that one party encrypts 
information using its own public key and another party can not read the information but can use the 
information to perform an operation. 

3. (Original) The method of claim 1, wherein the generating step further comprises an 
exchange of information between the first party device and the second party device whereby at least 
a portion of the information is encrypted using an encryption technique having a homomorphic 
property. 



2 



MacKenzie 15 

4. (Original) The method of claim 1, wherein the generating step further comprises: 
generating a share of a random secret; 

generating information representing encryptions of a form of the random secret, a share of a 

private key, and the ciphertext; 

transmitting at least the encrypted information to the second party device; and 
computing the plaintext based at least on the share of the random secret, the share of the 

private key, the ciphertext, and the data received from the second party device. 

5. (Original) The method of claim 1, wherein the first party device and the second party 
device additively share components of a private key. 

6. (Original) The method of claim 1, wherein the generating step further comprises 
generation and exchange of proofs between the first party device and the second party device that 
serve to verify operations performed by each party. 

7. (Original) The method of claim 6, wherein the proofs are consistency proofs based on 
three-move 2-protocols. 

8. (Currently Amended) A method for use in a device associated with a first party for 
assisting in decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the 
method comprising the steps of: 

receiving a request generated in and transmitted by a second party device for the partial 
assistance of the first party device in decrypting the ciphertext according to the Cramer-Shoup based 
encryption scheme; and 

generating results in the first party device based on the partial assistance provided thereby for 
use in the second party device to complete decryption of the ciphertext, wherein the assistance 
comprises an exchange of information between the first party device and the second party device 
separate from the sending of the ciphertext from the first party device to the second party device, 
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such that the first party device and the second party device jointly perform a decrypt ion operation of 
the ciphertext by each respectively performing one or more subcomputations of the joint decryption 
operation based at least in part on respective partial shares of a key that each party holds, but such 
that neither can decrypt the ciphertext alone. 

9. (Currently Amended) Apparatus for use in a device associated with a first party for 
decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the apparatus 
comprising: 

a memory; and 

at least one processor coupled to the memory and operative to: (i) obtain the ciphertext in the 
first party device sent from a device associated with a second party; and (ii) generate in the first 
party device a plaintext corresponding to the ciphertext based on assistance from a the second party 
device, wherein the assistance comprises an exchange of information between the first party device 
and the second party device separate from the sending of the ciphertext from the second party device 
to the first party device, the plaintext representing a result of the decryption according to the 
Cramer-Shoup based encryption scheme, such that the first party device and the second party device 
jointly perform a decrypt ion operation of the ciphertext by each respectively performing one or more 
subcomputations of the joint decryption operation based at least in part on respective partial shares 
of a key that each party holds, but such that neither can decrypt the ciphertext alone. 

10. (Original) The apparatus of claim 9, wherein the generating operation further comprises 
an exchange of information between the first party device and the second party device whereby at 
least a portion of the information is encrypted using an encryption technique such that one party 
encrypts information using its own public key and another party can not read the information but can 
use the information to perform an operation. 

1 1 . (Original) The apparatus of claim 9, wherein the generating operation further comprises 
an exchange of information between the first party device and the second party device whereby at 
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least a portion of the information is encrypted using an encryption technique having a homomorphic 
property. 

12. (Original) The apparatus of claim 9, wherein the generating operation further comprises: 
(i) generating a share of a random secret; (ii) generating information representing encryptions of a 
form of the random secret, a share of a private key, and the ciphertext; (iii) transmitting at least the 
encrypted information to the second party device; and (iv) computing the plaintext based at least on 
the share of the random secret, the share of the private key, the ciphertext, and the data received 
from the second party device. 

13. (Original) The apparatus of claim 9, wherein the first party device and the second party 
device additively share components of a private key. 

14. (Original) The apparatus of claim 9, wherein the generating operation further comprises 
generation and exchange of proofs between the first party device and the second party device that 
serve to verify operations performed by each party. 

15. (Original) The apparatus of claim 14, wherein the proofs are consistency proofs based on 
three-move E-protocols. 

16. (Currently Amended) Apparatus for use in a device associated with a first party for 
assisting in decrypting a ciphertext according to a Cramer-Shoup based encryption scheme, the 
apparatus comprising: 

a memory; and 

at least one processor coupled to the memory and operative to: (i) receive a request generated 
in and transmitted by a second party device for the partial assistance of the first party device in 
decrypting the ciphertext according to the Cramer-Shoup based encryption scheme; and (ii) generate 
results in the first party device based on the partial assistance provided thereby for use in the second 
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party device to complete decryption of the ciphertext, wherein the assistance comprises an exchange 
of information between the first party device and the second party device separate from the sending 
of the ciphertext from the first party device to the second party device, such that the first party 
device and the second party device jointly perform a decrypt ion operation of the ciphertext by each 
respectively performing one or more subcomputations of the joint decryption operation based at least 
in part on respective partial shares of a key that each party holds, but such that neither can decrypt 
the ciphertext alone. 
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